PatchTheCVE: url shortenerhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-5802: The URL Shortener by Myhop WordPress plugin through 1.0.17 does not sanitise and escape some of its settings, https://patchthecve.com/cve/CVE-2024-5802.htmlhttps://patchthecve.com/cve/CVE-2024-5802.htmlWed, 17 Jun 2026 08:16:40 +0000MEDIUM 4.8: The URL Shortener by Myhop WordPress plugin through 1.0.17 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowedCVE-2023-23896: Missing Authorization vulnerability in MyThemeShop URL Shortener by MyThemeShop.This issue affects URL Shortenhttps://patchthecve.com/cve/CVE-2023-23896.htmlhttps://patchthecve.com/cve/CVE-2023-23896.htmlWed, 17 Jun 2026 05:38:13 +0000MEDIUM 5.4: Missing Authorization vulnerability in MyThemeShop URL Shortener by MyThemeShop.This issue affects URL Shortener by MyThemeShop: from n/a through 1.0.17.CVE-2023-30472: Unauthhttps://patchthecve.com/cve/CVE-2023-30472.htmlhttps://patchthecve.com/cve/CVE-2023-30472.htmlWed, 17 Jun 2026 05:54:48 +0000HIGH 7.1: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in MyThemeShop URL Shortener by MyThemeShop plugin <= 1.0.17 versions.